AZL-85383
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85383.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-85383
- Upstream
- Published
- 2026-05-01T15:16:51Z
- Modified
- 2026-08-31T05:26:27Z
- Summary
- CVE-2026-43052 affecting package kernel for versions less than 6.6.142.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check tdls flag in ieee80211tdlsoper
When NL80211TDLSENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing.
Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.
- References